CVE-2020-17115

Microsoft SharePoint Server Spoofing Vulnerability...

Security Updates for Microsoft SharePoint Server 2016 (December 2020)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2020-17089 - A remote code execution...

CVE-2020-17115 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2020-17115

CVE-2020-17115 is described across connected sources as a session spoofing vulnerability in Microsoft SharePoint Server. The provided Nessus plugin entries group this CVE with other SharePoint CVEs and indicate vulnerable state when updates are missing (e.g., December 2020 security updates). Conc...